Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.mft
File:                     F5B1E2DE3922BE45CD0899545537337BDA94DC01.mft (raw, json)
Hash identifier:          C2nfTeIO8p7OVxuEW44Pag9Z9dGdSYBMb2kZDUwq1Hc=
Subject key identifier:   F3:90:2A:C9:5C:6E:BB:D0:94:6F:F9:CA:69:71:DE:A8:C1:04:BB:70
Authority key identifier: F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01
Certificate issuer:       /CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
Certificate serial:       19B488807E7FF52C50EEAAA2C3E62E07023ED027
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.mft
Manifest number:          0233
Signing time:             Fri 23 Feb 2024 19:46:11 +0000
Manifest this update:     Fri 23 Feb 2024 19:41:11 +0000
Manifest next update:     Sat 24 Feb 2024 23:44:11 +0000
Files and hashes:         1: 34352e3136302e3135322e302f32322d3234203d3e20323638343331.roa (hash: tF3bLf7bw0oCdEMaWoPVmuTt+YQx2nzHYG5bMD4CQBE=)
                          2: F5B1E2DE3922BE45CD0899545537337BDA94DC01.crl (hash: OH/uzov69uP5EGvst+b4kHMRWv9XQ/qmk2BX6WTszws=)
                          3: 323830343a353131633a3a2f33322d3438203d3e20323638343331.roa (hash: kuhA5k7FbzzBRPJvx9o1pKVCdjoQ+o0J4ko5j7q5wsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b4:88:80:7e:7f:f5:2c:50:ee:aa:a2:c3:e6:2e:07:02:3e:d0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
        Validity
            Not Before: Feb 23 19:41:11 2024 GMT
            Not After : Feb 24 23:44:11 2024 GMT
        Subject: CN=F3902AC95C6EBBD0946FF9CA6971DEA8C104BB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:64:4a:eb:25:25:1a:be:c6:64:df:41:ff:
                    91:0d:80:ce:56:a9:18:4e:c7:81:2b:cf:4a:f0:03:
                    bc:b8:93:94:ce:04:c9:08:48:fc:39:cd:62:b8:cc:
                    0e:dc:19:2d:10:41:2e:80:fc:81:42:c4:4d:3a:1a:
                    d2:38:e1:83:f5:1b:66:2b:b6:9d:12:b4:a1:38:39:
                    9a:52:ec:48:17:16:3b:00:a4:c5:14:9e:da:9a:d5:
                    b6:33:36:c0:96:8a:14:d0:5f:2a:91:c5:49:d6:49:
                    c4:2e:26:72:80:6b:c7:5a:f9:65:a1:dc:dd:8f:67:
                    91:fa:78:ee:b2:70:9f:4b:19:fc:f4:35:ad:8c:b7:
                    b7:91:d1:8d:45:2e:5e:e3:b7:70:78:52:10:14:9a:
                    08:34:5e:da:6c:de:cc:03:e6:9e:6a:3d:e9:75:e7:
                    e8:fd:c9:b0:48:59:b1:cc:fb:03:b7:32:6d:42:27:
                    24:44:d7:52:e9:37:a7:18:2d:3c:8e:c5:68:c3:49:
                    2d:66:21:f1:3f:35:1b:2b:83:81:89:3d:9e:9c:79:
                    9a:80:7b:88:18:da:42:c1:ed:eb:37:43:c2:17:34:
                    da:58:ae:52:0b:ef:70:1f:06:17:5a:d7:ca:89:fd:
                    76:e0:4c:ad:ac:4b:00:fb:92:50:9c:1c:13:ee:45:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:2A:C9:5C:6E:BB:D0:94:6F:F9:CA:69:71:DE:A8:C1:04:BB:70
            X509v3 Authority Key Identifier:
                keyid:F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:a5:63:49:38:27:27:b7:e1:d9:6b:3f:56:15:d1:ef:14:
         24:b0:91:f8:45:58:0f:45:52:a1:76:d6:e1:39:46:4d:a1:ef:
         b9:cf:c1:bf:2f:be:a7:d3:a9:2a:bc:9e:e4:ee:6f:17:26:69:
         07:a8:31:17:67:6d:13:d4:9e:92:91:14:62:e5:ab:dc:54:d4:
         6e:c9:ef:19:21:47:52:2d:0c:fe:1a:6b:c1:c3:2c:84:ca:d7:
         f5:33:d9:69:65:46:82:a1:eb:e0:5e:8c:10:c8:01:af:8c:e3:
         5c:cc:eb:c3:9a:8b:9b:67:fc:d9:64:b3:f6:79:a8:8c:c5:64:
         2a:1c:4f:e3:50:13:8d:7b:d0:33:02:67:45:2d:43:ac:f1:f1:
         c3:78:e9:3f:04:d9:63:ab:b9:fd:b5:f8:d7:ba:89:b2:cf:e5:
         61:43:0d:76:44:5b:0b:20:e7:d4:cb:7d:03:0f:4a:7a:28:c9:
         eb:53:33:43:14:16:80:7e:d1:86:1f:3f:ea:dd:58:d2:31:04:
         90:2d:77:13:e4:44:93:0a:1c:58:fd:55:b9:43:b8:49:16:df:
         8f:6a:e5:7d:13:4d:c5:4d:ee:58:4c:15:8e:cd:78:9c:6d:45:
         e7:66:07:70:55:e4:d5:65:59:eb:b9:96:d3:c9:e3:f7:85:85:
         92:1c:34:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGbSIgH5/9SxQ7qqiw+YuBwI+0CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVCMUUyREUzOTIyQkU0NUNEMDg5OTU0NTUzNzMzN0JE
QTk0REMwMTAeFw0yNDAyMjMxOTQxMTFaFw0yNDAyMjQyMzQ0MTFaMDMxMTAvBgNV
BAMTKEYzOTAyQUM5NUM2RUJCRDA5NDZGRjlDQTY5NzFERUE4QzEwNEJCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eGRK6yUlGr7GZN9B/5ENgM5W
qRhOx4Erz0rwA7y4k5TOBMkISPw5zWK4zA7cGS0QQS6A/IFCxE06GtI44YP1G2Yr
tp0StKE4OZpS7EgXFjsApMUUntqa1bYzNsCWihTQXyqRxUnWScQuJnKAa8da+WWh
3N2PZ5H6eO6ycJ9LGfz0Na2Mt7eR0Y1FLl7jt3B4UhAUmgg0Xtps3swD5p5qPel1
5+j9ybBIWbHM+wO3Mm1CJyRE11LpN6cYLTyOxWjDSS1mIfE/NRsrg4GJPZ6ceZqA
e4gY2kLB7es3Q8IXNNpYrlIL73AfBhda18qJ/XbgTK2sSwD7klCcHBPuRbbfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU85AqyVxuu9CUb/nKaXHeqMEEu3AwHwYDVR0j
BBgwFoAU9bHi3jkivkXNCJlUVTcze9qU3AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEtKYXlFRFJBY2R1UHZvempYbkxmMTRhckhXN2kyS0Z0bWFlQW1oc1No
SmUvMC9GNUIxRTJERTM5MjJCRTQ1Q0QwODk5NTQ1NTM3MzM3QkRBOTREQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1QjFFMkRFMzkyMkJFNDVD
RDA4OTk1NDU1MzczMzdCREE5NERDMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEtKYXlFRFJBY2R1UHZvempYbkxmMTRhckhXN2kyS0Z0bWFlQW1oc1NoSmUvMC9G
NUIxRTJERTM5MjJCRTQ1Q0QwODk5NTQ1NTM3MzM3QkRBOTREQzAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACeqlY0k4Jye34dlrP1YV0e8UJLCR+EVYD0VSoXbW4TlGTaHvuc/Bvy++p9Op
Krye5O5vFyZpB6gxF2dtE9SekpEUYuWr3FTUbsnvGSFHUi0M/hprwcMshMrX9TPZ
aWVGgqHr4F6MEMgBr4zjXMzrw5qLm2f82WSz9nmojMVkKhxP41ATjXvQMwJnRS1D
rPHxw3jpPwTZY6u5/bX417qJss/lYUMNdkRbCyDn1Mt9Aw9KeijJ61MzQxQWgH7R
hh8/6t1Y0jEEkC13E+REkwocWP1VuUO4SRbfj2rlfRNNxU3uWEwVjs14nG1F52YH
cFXk1WVZ67mW08nj94WFkhw0ag==
-----END CERTIFICATE-----